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(54) Abstract Title 

Provision of services to a mobile phone user without disclosing the user's identity to the service provider 

(57) Application service providers ASP1-ASP5 are linked to a mobile telecommunications network N for 
providing information services to users MS1-MS4 in the network.. The network intercepts a user request for 
service and generates a user tag identifying the user, the service provider to whom the request is directed and 
the time and date of the request. The network encodes or encrypts the user tag and transmits it in a request 
signal to the ASP such that the service provider cannot obtain the user's identity or access the user directly. 
The ASP then uses the user tag to request the current location of the user. The network transmits the user's 
location to the ASP in association with the user tag and the ASP responds by transmitting back the requested 
information (which may be location dependent) again in association with the user tag. The network passes the 
information to the user. Finally the ASP uses the user tag to request the network to levy charge against the 
user for the service, through the network.. The user tag may have a predetermined short lifetime for further 
security. 
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At least one drawing originally filed was informal and the print reproduced here is taken from a later filed formal copy. 
The print reflects an assignment of the application under the provisions of Section 30 of the Patents Act 1977. 
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PROVISION OF SERVICES VTA A MOBILE TELECOMMUNICATIONS NETWORK 



The invention relates to the provision of services via a mobile telecommunications 
network. Systems and methods according to the invention, to be described in more detail 
below by way of example only, enable application service providers to provide services 
to users in a mobile telecommunications network such as a cellular telephone network. 

According to the invention, there is provided a method by which a service provider 
provides a service to a user in a mobile telecommunications network in response to a 
request for the service by that user, in which the network generates a request signal in 
response to the user request, the network transmits the request signal to the service 
provider, and the service provider provides the service to the user via the network and 
using the request signal, the request signal including identity information which identifies 
the user to the network but providing no information to the service provider which 
enables the service provider to directly access the user. 

According to the invention, there is further provided a mobile telecommunications 
network, comprising means responsive to a request by a user in the network for an 
informational response service to be provided by a service provider known to the network 
for at least temporarily storing the identity of the particular user making the request, 
means for transmitting a request signal to the service provider which corresponds to the 
request by that particular user but does not enable direct access by the service provider 



to that user, and means for receiving the informational response from the service provider 
in association with the request signal for directing the informational response to the 
particular user. 

According to the invention, there is also provided a system, comprising a mobile 
communications network and at least one service provider capable of providing a service 
to a user in the network in response to a request for the service by that user, including 
means in the network for generating a request signal in response to the user request, 
means for transmitting the request signal to the service provider, means in the network 
for receiving information relating to the service from the service provider in association 
with the request signal, and means in the network responsive to the request signal to 
provide the information to the user, the request signal including identity information 
which identifies the user to the network but providing no information to the service 
provider which enables the service provider to directly access the usen 

Systems and methods according to the invention for providing services to users in a 
cellular telephone network will now be described by way of example only and with 
reference to the accompanying diagrammatic drawings in which: 

Figure 1 shows such a network; and 

Figure 2 is a flow chart showing operations taking place in the network. 
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Figure 1 shows a cellular telecommunications network N in which are located users 
having respective mobile telephone handsets or mobile stations MSI, MS2, MS3, MS4... 
The network N may be a GSM or 3G (Third Generation) network or similar network. 
Figure 1 also shows a number of application service providers ASP1, ASP2, ASP3, 
ASP4, ASPS... . The application service providers provide various services to users in 
the network N. The services offered by the ASPs may be of various types. For example, 
they may be of the "subscription" or "non-subscription" type. A subscription-type service 
might be, for example, a traffic information service to which a particular user subscribes, 
paying an annual or monthly subscription fee, automatically being provided with periodic 
or irregular information concerning road traffic conditions relevant to the location of the 
user's vehicle at any time. Other examples of subscription-type services are the provision 
of news information, sports information, financial information and weather information. 
Subscription-type services therefore provide services on an on-going basis to subscribing 
users. 

A non-subscription-type service provides a single service to a user, normally on a 
commercial basis and for a single payment. Such a service may in particular be 
dependent on the user's current location. One example of such a non-subscription-type 
service is a service provided by (or on behalf of) a chain of fast food (e.g pizza) outlets 
distributed geographically over all or part of the area covered by the network N. Using 
this service, a user, in response to a specific real time request, can be provided by the 
relevant ASP (e.g. ASP1) with directions to or the address of the outlet nearest to the 
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user's current location. For the provision of this information, ASP1 will make a 
(normally small) charge. The charge could be debited directly to the user. Instead, in a 
case where ASP1 is providing the service for the chain of pizza outlets, the charge might 
be debited to that chain in the form of an "introduction fee" for introducing that user to 
the particular outlet. Such charges may be debited by the network on behalf of the ASP. 

The system and method to be described in more detail below are particularly concerned 
with non-subscription-type services - such as the example given above where a user in the 
network N wishes to ask ASP1 for directions to or the location of the nearest pizza outlet. 
Obviously, though, the system and method can provide other non-subscription-type 
services. 

The system and method to be described are intended to deal with certain problems or 
potential problems :- 

(a) ASP1 needs to know the location of the user, in order to be able to accede 
to the user's request for directions to or the location of the nearest pizza 
outlet. The operator of the network N has this information - but it of 
course has value or potential value and the network operator will therefore 
not wish to disclose it freely to ASP1. 



(b) If the system and method are arranged so that the user makes a telephone 
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call direct to ASP1, the user's CLI (calling line identifier, or telephone 
number) will normally be disclosed to ASP1 . ASP1 can then correspond 
directly with the user and obtain the user's location. The valuable 
information, concerning user's telephone number and location, as known 
to the network operator, will then have been directly and freely disclosed 
to ASP1 without recompense to the network operator (apart, of course, 
from the cost of the telephone call). 

(c) If the user's telephone number becomes disclosed to ASP1, the ASP will 
be able to use this information in future to make direct calls to the user, 
offering the pizza service (or other services), thus detrimentally by-passing 
the network operator. 

(d) It is of major importance that the network operator (and other parties in the 
system) respect data protection and privacy laws and regulations. Thus, 
these may be breached by unsolicited advertising calls to the user (e.g. by 
the ASP if the ASP gains knowledge of the user's telephone number) or by 
disclosure of the user's identity, or identity combined with location, of the 
user. Mere disclosure to the ASP of the user's location, without identifying 
the user in a manner enabling the ASP to make direct access to the user, 
will not breach such laws or regulations. 
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The system and method will now be described in more detail with reference to Figure 2 
which represents a flow chart of the operations taking place. 

At A, a user initiates a request to ASP1 for (in this example) the address of, or the 
directions to, the nearest pizza outlet. At step B, this request is received by the network 
N. It is not transmitted directly to ASP1 but recognised as being intended for ASP 1. 

At step C, the network responds to the user's request by generating a request signal or 
"user tag". The user tag comprises at least four components: (i) an identification of the 
user; (ii) an identification of the ASP which is to be involved in the transaction (ASP 1 
in this case); (iii) the time and date of the user's request; and (iv) information relating to 
the actual connection (mode, format etc.). In connection with (iv), a "session" between 
a user and ASP may consist of many components. There could be several layers of 
activity going on in one session, which all may require different billing/auditing. Hence 
the specifies of the connection will identify the unique aspects of the session. It is an 
important feature of the user tag that it is encoded or encrypted in a suitable way 
(discussed below in more detail) so that the information which it contains is not accessible 
by the ASP though it can be distinguished by the ASP from user tags relating to other user 
requests; thus for example, the user tag may comprise a multi-digit number or have 
alphanumeric or any other suitable form. The information which it contains or represents 
remains accessible by the network operator. 
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At step D, the network passes the user tag to ASP 1 which recognises it as representing 
a request from a user for the address of or directions to the user's nearest pizza outlet 
ASP1 does not of course receive any information about the user or the user's location 
(except that it is implicit that the user is within the area covered by the network N). 

If ASP Vs system is currently operative, the ASP will at step E request information about 
the user's location from the network N, using the user tag as a means of relating this 
request to the particular user. 

At step F, the network responds to this request by providing the location of the user to 
ASP 1 - that is, by defining the geographical area in which the user is currently present. 
The network knows which user is concerned because it derives this information from the 
user tag. This is the only information which the network will provide; no information 
identifying the user or the user's telephone number is provided. 

At step G, ASP 1 responds to receipt of the information about the user's location by 
generating the requested information (the address of or directions to the nearest pizza 
outlet). Alternatively, it may be that there is no pizza outlet within reasonable distance 
of the user's location, and information to that effect will instead be generated. At step H, 
the ASP passes this information back to the network N. At step I, the network transmits 
this information to the user. Thus, ASP 1 has no direct communication with the user and 
does not need to know the user's telephone number (or identity). 
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At step J the user then acts in accordance with the address/directions provided. 

At step K, ASP 1 then requests the network operator to levy a charge against the user, for 
the provision of the service. ASP 1 will again use the user tag during this process so that 
the network operator can identify the user and levy the charge accordingly (step L). The 
charge can be levied by debiting the user's call charge log (if the user is a contract 
customer) or placing a debit against the user's pre-paid credit if the user is a pre-pay 
customer. 

In accordance with an important feature of the user tag, it is provided with a finite lifetime 
appropriate to the maximum time likely to be involved in the provision of the service (e.g. 
30 minutes in this case). This lifetime prevents the ASP from attempting to make further 
contacts with the user (via the network operator) with a view to selling further services. 
The provision of this finite lifetime for the user tag provides further protection for the 
user's privacy and for the user data stored by the network operator. Because the user tag 
incorporates information identifying the particular ASP, it protects against fraudulent 
attempts by another ASP to make contact with the user. 

The user tag can be protected in any suitable way. For example, it could be produced in 
the form of a random multi-digit number which is stored by the network operator in a 
database in association with the specific four components of the user tag. Instead, the 
user tag could be generated by the network operator and then encrypted using the network 
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operator's public key in a public/private key system. Other suitable methods of coding 
or encrypting or otherwise protecting the information in the user tag can be used. 

The user can be used to perform an auditing function. The network operator will have a 
complete record of the transactions and services requested and delivered. This is clearly 
relevant to billing but can also be used for marketing and data analysis purposes (e.g. 
which is the most popular ASP etc.). 

It is important to note that the system described is not restricted to location-dependent 
services. For example, a user could order a ring tone from an ASP. The ASP provider 
can then deliver the ring tone directly to the user's mobile without needing to know the 
mobile number (by using the user tag in the manner explained). In addition, information 
not related to location can be delivered directly to a user using the user tag in the manner 
explained (e.g. share prices). 
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CLAI M S 

1 . A method by which a service provider provides a service to a user in a mobile 
telecommunications network in response to a request for the service by that user, in which 
the network generates a request signal in response to the user request, the network 
transmits the request signal to the service provider, and the service provider provides the 
service to the user via the network and using the request signal, the request signal 
including identity information which identifies the user to the network but providing no 
information to the service provider which enables the service provider to directly access 
the user. 

2. A method according to claim 1 , in which the provision of the service by the service 
provider requires that the service provider has location information specifying the 
location of the user, and in which the service provider uses the request signal to obtain 
that location information from the network operator. 

3 . A method according to claim 2, in which the service provider transmits the request 
signal to the network and the network uses the request signal and the identity information 
therein to derive the location information and transmits that information to the service 
provider in association with the request signal. 

4. A method according to any preceding claim, in which the service provider uses the 
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request signal to request generation of charging information by the network for the 
provision of the service. 

5. A method according to claim 4, in which the network uses the request signal to 
identify the user in relation to which the charge is to be generated. 

6. A method according to any preceding claim, in which the request signal is only 
effective for the service provider for a length of time which is dependent on the length of 
time for providing the service. 

7. A method according to claim 6, in which the request signal is only effective for the 
service provider for a predetermined length of time. 

8. A method according to any preceding claim, in which the request signal identifies 
the service provider and the time of the request to the network. 

9. A method according to any preceding claim, in which the request signal identifies 
a position in a database from which the network can extract the identity information. 

10. A method according to any one of claims 1 to 8, in which the request signal is 
encrypted before receipt by the service provider. 
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11. A method according to any preceding claim, in which the service provided by the 
service provider is the provision of information. 

12. A mobile telecommunications network, comprising means responsive to a request 
by a user in the network for an informational response service to be provided by a service 
provider known to the network for at least temporarily storing the identity of the 
particular user making the request, means for transmitting a request signal to the service 
provider which corresponds to the request by that particular user but does not enable 
direct access by the service provider to that user, and means for receiving the 
informational response from the service provider in association with the request signal for 
directing the informational response to the particular user. 

13. A system, comprising a mobile communications network and at least one service 
provider capable of providing a service to a user in the network in response to a request 
for the service by that user, including means in the network for generating a request signal 
in response to the user request, means for transmitting the request signal to the service 
provider, means in the network for receiving information relating to the service from the 
service provider in association with the request signal, and means in the network 
responsive to the request signal to provide the information to the user, the request signal 
including identity information which identifies the user to the network but providing no 
information to the service provider which enables the service provider to directly access 
the user. 
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14. A network or system according to claim 12 or 13, in which the provision of the 
service by the service provider requires that the service provider has location information 
specifying the location of the user, and in which the service provider uses the request 
signal to obtain that location information from the network, 

15. A network or system according to claim 1 4, in which the service provider transmits 
the request signal to the network and the network uses the request signal and the identity 
information therein to derive the location information and transmits that information to 
the service provider in association with the request signal. 

16. A network or system according to any one of claims 1 2 to 1 5, in which the service 
provider uses the request signal to request generation of charging information by the 
network for the provision of the service. 

17. A network or system according to claim 1 6, in which the network uses the request 
signal to identify the user in relation to which the charge is to be generated. 

18. A network or system according to any one of claims 12 to 17, in which the request 
signal is only effective for the service provider for a length of time which is dependent 
on the length of time for providing the service. 

19. A network or system according to claim 18, in which the request signal is only 
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effective for the service provider for a predetermined length of time. 

20. A network or system according to any one of claims 12 to 19, in which the request 
signal identifies the service provider and the time of the request to the network. 

21. A network or system according to any one of claims 12 to 20, in which the request 
signal identifies a position in a database from which the network can extract the identity 
information. 

• 22. A network or system according to any one of claims 12 to 20, in which the request 
signal is encrypted before receipt by the service provider. 

23. A method, network or system according to any preceding claim, in which the 
mobile telecommunications network is a cellular telecommunications system. 

24. A method by which a service provider provides a service to a user in a mobile 
telecommunications network, substantially as described with reference to the 
accompanying drawings. 

25. A mobile communications network, substantially as described with reference to 
the accompanying drawings. 
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26. A system, comprising a mobile communications network and at least one service 
provider, substantially as described with reference to the accompanying drawings. 
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